$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/vTZoYo8N950EfsoNmtz8C2aT4wk.mft File: vTZoYo8N950EfsoNmtz8C2aT4wk.mft (raw, json) Hash identifier: 3UIjZld1H+KbQ/1XpCegYhtCNmdj1ehYW+CMa0y/cvU= Subject key identifier: 35:D7:55:B2:43:B7:02:95:3B:FB:1A:84:D3:8F:88:F6:66:10:67:C3 Authority key identifier: BD:36:68:62:8F:0D:F7:9D:04:7E:CA:0D:9A:DC:FC:0B:66:93:E3:09 Certificate issuer: /CN=bd3668628f0df79d047eca0d9adcfc0b6693e309 Certificate serial: 0199172D6B9293F8FB9273E32BA327321000 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vTZoYo8N950EfsoNmtz8C2aT4wk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/vTZoYo8N950EfsoNmtz8C2aT4wk.mft Manifest number: 11DB Signing time: Fri 05 Sep 2025 00:01:16 +0000 Manifest this update: Fri 05 Sep 2025 00:01:16 +0000 Manifest next update: Sat 06 Sep 2025 00:01:16 +0000 Files and hashes: 1: 0Om0y2WJnxnezCkTIkUnB1aduws.roa (hash: /h/ZFV7Tyfw4gvX/rM0qUi+sUrGWiAq4SLLKFNedki0=) 2: 1-AkEgtFYAeYpvfsAvZdlJuyuVF4.roa (hash: bj7r1qBjXXo6AEdGvTw884ILliGHjEYqfvi7PxgbBxU=) 3: 18s6iv28JzN23ACcxvidnV4O018.roa (hash: E520J/m/9e2VHqsrljvZsuWV/dovmSdu9Qn56B7khEk=) 4: 7HaXNFSYGxOw3R9L6I0z6V-mXb4.roa (hash: iLQ9KNTQ4u3M1tfa+YEpVxilam6XMDqybBUGCnTqiss=) 5: 8GAUp0koq7cLyKDBljD12_gS9fU.roa (hash: TLK0INhWOPZtOAAlZEJ0okbttAxXwilC0/Fin663h4o=) 6: 8TJR1HyAwg6k7vxm3-38XYPiUhs.roa (hash: UlmTtzmR+/FZGoYwPXPmvRp8bd7Kee7FHaH8ivwDixM=) 7: 8ezldgsZjdYUFJex6k0Ut1HMEC4.roa (hash: bDkmxhsgqaahY46AsODPGEATa+7WHhbve+WtDMm08R4=) 8: EDQ-Yk7isf9sH4FXPQShWflCgog.roa (hash: SaxlXz/G0eyL2HVakqjpN328ugQ4obe8PUCDuMchTeo=) 9: N9DT59un9kPPAqydx65unLzNI5M.roa (hash: DR7WQ6lKKlByvf06hUpXgwGsB6j3cg+izla7y1IjfTk=) 10: b7dBieR_P9kmLnGcxW0fyaZjeow.roa (hash: 7CjlHKhuVQvksqqfXKK92KNHJPTf/pbKa2kMAV8YPNg=) 11: c-Wnlh-kFjP6q7EkrDX-duWttJc.roa (hash: 6Prgxqh9/nVNm4A4c9/ay2pcayT5Dd+P1lar2QOL0DQ=) 12: dPOsPKxQV7RK7bRZH219oriyw2A.roa (hash: LGV5o25NJR8U4mI0sYyGAmjYHBoshsRrD6voeO6vKNo=) 13: e_TrdC1EfOVSQQ49ZA0FeaTTzjk.roa (hash: jUrwE90O+dclJeJNaa2stLGSCRfUe/eu1j5NSomJE/4=) 14: hVFH86LVYnyePIbmaCqfpS5vJKM.roa (hash: Jp2Ho2sVrxwbPVnhT98cuAw+l3HPTfx4q1sSUogMvrs=) 15: iL4hRCpLyAzkS7iRbK0kB-K-W-4.roa (hash: ZPL3tMdQLbuvPkq9q+UlEUarVrYcyMhTXlq7N8fBMNw=) 16: kPQEqnQ2tyC7d6-aTILssWet_yM.roa (hash: 1lTdkFvpUx4+IWByR4mFr+hq9dYheTg8typs5YnbW5g=) 17: pVgxUhCc7dPqvhiu0OhGRnn06X4.roa (hash: H5Zdm7znexs+7FCW+NTfkFJPDw3F/Gamb5QXizhY9Tk=) 18: s1jMtP4ZxdDGLiXyWufZ2W2cTr8.roa (hash: fhS6zm0llrlKGdQl7xXdaHOU6S1Tam7R5lawO5PGwwg=) 19: tBvdEHK96-8IqXDimpyAd6-FvfI.roa (hash: kV3wVJLyHXbFkaWXeqnUNYEgcOQg7ySmIasAR3i9gU0=) 20: vTZoYo8N950EfsoNmtz8C2aT4wk.crl (hash: 8+kwohs2kKm/EmGN2WNX9BeuzVM1o4OSAl7cCgjeytM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/vTZoYo8N950EfsoNmtz8C2aT4wk.crl rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/vTZoYo8N950EfsoNmtz8C2aT4wk.mft rsync://rpki.ripe.net/repository/DEFAULT/vTZoYo8N950EfsoNmtz8C2aT4wk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Sep 2025 00:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:17:2d:6b:92:93:f8:fb:92:73:e3:2b:a3:27:32:10:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bd3668628f0df79d047eca0d9adcfc0b6693e309 Validity Not Before: Sep 5 00:01:16 2025 GMT Not After : Sep 6 00:01:16 2025 GMT Subject: CN=35d755b243b702953bfb1a84d38f88f6661067c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:34:e9:3c:ac:9c:7e:4d:72:90:36:ad:03:ed: 82:a7:64:ee:cd:f6:cd:8c:af:c5:7a:02:87:7a:ef: 83:7d:c3:07:d8:3a:62:55:57:c4:bf:da:ae:dd:9e: ee:a4:c4:d7:8a:bb:66:c3:48:a4:6f:2f:cd:08:33: 4e:19:05:c1:5d:73:b4:05:ea:ef:ec:8d:d3:f5:7a: 6c:98:96:16:98:01:08:44:5a:3a:3a:f2:62:7c:b3: ec:61:93:6f:db:8c:5a:75:29:38:dc:56:78:03:c4: 20:62:ab:d8:6f:d0:c9:e2:17:c5:1f:7b:b6:78:de: be:20:83:0f:91:23:4b:5c:0d:7f:20:e9:2b:1b:78: cd:a2:9c:53:d9:1e:d0:c9:48:ab:b1:c8:5c:fe:5b: d0:e4:d0:e3:60:5e:62:38:78:18:ab:69:50:be:b8: 6f:97:d2:af:85:7b:e7:3c:e8:8a:4a:00:a5:9b:ce: ad:1d:de:af:e5:d9:79:cd:2d:5a:6e:9d:62:26:e5: cd:9b:2e:db:40:65:a4:73:3a:4e:ac:b2:75:f6:e0: 76:58:4d:4f:a1:6a:a7:f0:87:95:0a:47:6e:b3:40: db:1e:6d:eb:60:a8:3d:d0:4f:20:20:d2:be:ac:49: 20:25:fa:e2:2f:22:38:a7:d4:1c:83:98:e5:dd:dc: c5:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:D7:55:B2:43:B7:02:95:3B:FB:1A:84:D3:8F:88:F6:66:10:67:C3 X509v3 Authority Key Identifier: keyid:BD:36:68:62:8F:0D:F7:9D:04:7E:CA:0D:9A:DC:FC:0B:66:93:E3:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vTZoYo8N950EfsoNmtz8C2aT4wk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/vTZoYo8N950EfsoNmtz8C2aT4wk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/vTZoYo8N950EfsoNmtz8C2aT4wk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:42:5c:f9:13:99:38:65:a8:65:9e:a3:c3:e8:a5:b8:9f:20: 4e:e8:dc:2c:47:a2:da:74:40:93:a6:03:75:d0:c7:00:bd:46: 92:cc:a9:2d:ca:68:bf:5c:fc:58:75:70:bb:0e:09:01:0f:c2: 3e:6e:15:ae:f2:6c:3f:5b:e0:4a:f9:94:89:39:ff:6c:48:a2: 8a:66:1d:5c:6c:dd:e0:4d:b3:aa:d2:be:64:23:01:d8:e2:c1: d0:4f:8c:08:1b:35:96:8f:80:dd:f9:69:30:57:f7:fe:70:59: dc:15:1f:ef:4a:50:92:33:bb:5f:cb:ec:72:67:b6:69:37:b5: 06:c0:99:57:7a:47:20:f6:95:3e:0b:46:a8:96:4f:63:b2:3f: 82:36:a6:96:16:ce:13:4b:a2:1b:fc:17:75:23:bc:88:5e:9e: be:74:06:7e:aa:ca:56:b7:c8:58:c3:8e:06:c9:6a:cf:ba:54: 6b:19:52:cc:3e:65:0c:2d:16:46:23:57:43:5b:24:b7:03:cc: 64:c6:37:c5:a5:03:0a:a0:27:b4:9f:b8:62:fa:66:b0:4c:4f: 8c:19:cb:f9:a6:0d:b2:54:c8:69:e8:62:c5:d9:26:00:58:b5: 75:7c:68:8f:59:4d:4a:c7:68:11:5d:20:62:67:72:0c:11:0b: ab:04:33:1c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZkXLWuSk/j7knPjK6MnMhAAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJkMzY2ODYyOGYwZGY3OWQwNDdlY2EwZDlhZGNmYzBiNjY5 M2UzMDkwHhcNMjUwOTA1MDAwMTE2WhcNMjUwOTA2MDAwMTE2WjAzMTEwLwYDVQQD EygzNWQ3NTViMjQzYjcwMjk1M2JmYjFhODRkMzhmODhmNjY2MTA2N2MzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3zTpPKycfk1ykDatA+2Cp2TuzfbN jK/FegKHeu+DfcMH2DpiVVfEv9qu3Z7upMTXirtmw0ikby/NCDNOGQXBXXO0Berv 7I3T9XpsmJYWmAEIRFo6OvJifLPsYZNv24xadSk43FZ4A8QgYqvYb9DJ4hfFH3u2 eN6+IIMPkSNLXA1/IOkrG3jNopxT2R7QyUirschc/lvQ5NDjYF5iOHgYq2lQvrhv l9KvhXvnPOiKSgClm86tHd6v5dl5zS1abp1iJuXNmy7bQGWkczpOrLJ19uB2WE1P oWqn8IeVCkdus0DbHm3rYKg90E8gINK+rEkgJfriLyI4p9Qcg5jl3dzFoQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDXXVbJDtwKVO/sahNOPiPZmEGfDMB8GA1UdIwQY MBaAFL02aGKPDfedBH7KDZrc/Atmk+MJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdlRab1lvOE45NTBFZnNvTm10ejhDMmFUNHdrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi8xYjU3MjItMWRkYS00ZGYzLWE0NWMt ZTZiZjMxNmM5NGExLzEvdlRab1lvOE45NTBFZnNvTm10ejhDMmFUNHdrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMi8xYjU3MjItMWRkYS00ZGYzLWE0NWMtZTZiZjMxNmM5NGEx LzEvdlRab1lvOE45NTBFZnNvTm10ejhDMmFUNHdrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWUJc+ROZ OGWoZZ6jw+iluJ8gTujcLEei2nRAk6YDddDHAL1GksypLcpov1z8WHVwuw4JAQ/C Pm4VrvJsP1vgSvmUiTn/bEiiimYdXGzd4E2zqtK+ZCMB2OLB0E+MCBs1lo+A3flp MFf3/nBZ3BUf70pQkjO7X8vscme2aTe1BsCZV3pHIPaVPgtGqJZPY7I/gjamlhbO E0uiG/wXdSO8iF6evnQGfqrKVrfIWMOOBslqz7pUaxlSzD5lDC0WRiNXQ1sktwPM ZMY3xaUDCqAntJ+4YvpmsExPjBnL+aYNslTIaehixdkmAFi1dXxoj1lNSsdoEV0g YmdyDBELqwQzHA== -----END CERTIFICATE-----Generated at Fri Sep 5 09:55:59 2025 by rpki-client